Write-ups
Ctrlk
Personal WebsiteGithubLinkedIn
  • Home
  • Blue Team Labs Online
  • bWAPP
  • Command Challenge
  • CryptoHack
  • CSAW 2023
  • CTFLearn
  • CyberDefenders
  • DVWA
  • Ethernaut
  • Exploit Education
  • Google CTF - Beginner's Quest
  • Hacker101
  • LetsDefend
  • Microcorruption
  • NetGarage IO
  • OverTheWire
  • PicoCTF
  • PortSwigger labs
    • Client-side topics
    • Server-side topics
      • SQL injection
      • Authentication
      • Path traversal
        • File path traversal, traversal sequences stripped non-recursively
        • File path traversal, traversal sequences blocked with absolute path bypass
        • File path traversal, simple case
        • File path traversal, traversal sequences stripped with superfluous URL-decode
        • File path traversal, validation of start of path
        • File path traversal, validation of file extension with null byte bypass
      • Command injection
      • Business logic vulnerabilities
      • Information disclosure
      • Access control
      • Server-side request forgery (SSRF)
      • XXE injection
  • Pwn College
  • pwanable.kr
  • Root Me
  • ROP Emporium
  • TryHackMe
  • Under The Wire
  • W3Challs
  • Websec.fr
Powered by GitBook
On this page

Was this helpful?

  1. PortSwigger labs
  2. Server-side topics

Path traversal

  • File path traversal, simple case

  • File path traversal, traversal sequences blocked with absolute path bypass

  • File path traversal, traversal sequences stripped non-recursively

  • File path traversal, traversal sequences stripped with superfluous URL-decode

  • File path traversal, validation of start of path

  • File path traversal, validation of file extension with null byte bypass

Last updated 1 year ago

Was this helpful?